Revision 1a887ea3
Added by David Sorber almost 7 years ago
| configs/brutus/01-netcfg.yaml | ||
|---|---|---|
|
# This file describes the network interfaces available on your system
|
||
|
# For more information, see netplan(5).
|
||
|
network:
|
||
|
version: 2
|
||
|
renderer: networkd
|
||
|
ethernets:
|
||
|
enp4s0:
|
||
|
dhcp4: yes
|
||
|
enp1s0d1:
|
||
|
dhcp4: yes
|
||
|
mtu: 9000
|
||
|
dhcp4-overrides:
|
||
|
route-metric: 200
|
||
|
routes:
|
||
|
- to: 192.168.250.0/24
|
||
|
via: 0.0.0.0
|
||
|
metric: 20
|
||
| configs/brutus/network_tweaks_brutus.sh | ||
|---|---|---|
|
#!/bin/bash
|
||
|
|
||
|
sleep 2
|
||
|
|
||
|
# Delete the default route for enp1s0d1, we only want to use it for 10G
|
||
|
# traffic. NOTE: netplan/networkd correctly is setting the route.
|
||
|
/sbin/route del -net 192.168.0.0 netmask 255.255.0.0 dev enp1s0d1
|
||
|
|
||
|
# Set 9000 MTU for the 10G interface enp1s0d1
|
||
|
/sbin/ifconfig enp1s0d1 mtu 9000
|
||
|
|
||
|
exit 0
|
||
| configs/brutus/networking-tweaks.service | ||
|---|---|---|
|
[Unit]
|
||
|
Description=Tweak Some Networking Settings
|
||
|
Wants=network-online.target
|
||
|
After=network-online.target
|
||
|
|
||
|
[Service]
|
||
|
ExecStart=/home/dsorber/network_tweaks_brutus.sh
|
||
|
|
||
|
[Install]
|
||
|
WantedBy=multi-user.target
|
||
|
|
||
|
# Setup
|
||
|
#
|
||
|
# Install network_tweaks_brutus.sh script.
|
||
|
# Copy networking-tweaks.service to /lib/systemd/system/
|
||
|
# Start it: sudo systemctl start networking-tweaks.service
|
||
|
# Enable it: sudo systemctl enable networking-tweaks.service
|
||
| configs/phalanx/01-netcfg.yaml | ||
|---|---|---|
|
# This file describes the network interfaces available on your system
|
||
|
# For more information, see netplan(5).
|
||
|
network:
|
||
|
version: 2
|
||
|
renderer: networkd
|
||
|
ethernets:
|
||
|
enp1s0f1:
|
||
|
dhcp4: yes
|
||
|
mtu: 9000
|
||
|
enp1s0f0:
|
||
|
dhcp4: yes
|
||
|
mtu: 9000
|
||
|
routes:
|
||
|
- to: 192.168.250.0/24
|
||
|
via: 0.0.0.0
|
||
|
metric: 20
|
||
|
enp4s0:
|
||
|
dhcp4: yes
|
||
|
|
||
| configs/phalanx/apache/baikal.conf | ||
|---|---|---|
|
Alias /calendar /var/www/baikal/html
|
||
|
Alias /calendar/ /var/www/baikal/html/
|
||
|
|
||
|
<Directory "/var/www/baikal">
|
||
|
Options -Indexes
|
||
|
</Directory>
|
||
|
|
||
|
<Directory "/var/www/baikal/html">
|
||
|
Options None
|
||
|
Options +FollowSymlinks
|
||
|
AllowOverride All
|
||
|
</Directory>
|
||
| configs/phalanx/apache/main.conf | ||
|---|---|---|
|
<VirtualHost *:80>
|
||
|
Redirect permanent / https://10.0.0.6
|
||
|
</VirtualHost>
|
||
|
|
||
|
<VirtualHost _default_:443>
|
||
|
ServerName https://10.0.0.6:443
|
||
|
ServerAdmin webmaster@localhost
|
||
|
|
||
|
DocumentRoot /var/www
|
||
|
<Directory />
|
||
|
Options FollowSymLinks
|
||
|
AllowOverride None
|
||
|
</Directory>
|
||
|
<Directory /var/www/>
|
||
|
Options Indexes FollowSymLinks MultiViews
|
||
|
AllowOverride None
|
||
|
Require all granted
|
||
|
</Directory>
|
||
|
|
||
|
Alias /htdocs /var/htdocs
|
||
|
<Directory /var/htdocs>
|
||
|
Require all granted
|
||
|
</Directory>
|
||
|
|
||
|
#WSGIScriptAlias /bfcs /home/dsorber/bfcs/app.wsgi
|
||
|
|
||
|
ErrorDocument 403 /error_pages/404.html
|
||
|
ErrorDocument 404 /error_pages/404.html
|
||
|
|
||
|
CustomLog ${APACHE_LOG_DIR}/access.log combined
|
||
|
ErrorLog ${APACHE_LOG_DIR}/error.log
|
||
|
|
||
|
# Possible values include: debug, info, notice, warn, error, crit,
|
||
|
# alert, emerg.
|
||
|
LogLevel warn
|
||
|
|
||
|
SSLEngine On
|
||
|
SSLCertificateFile /etc/apache2/ssl/baranovich.crt
|
||
|
SSLCertificateKeyFile /etc/apache2/ssl/baranovich.key
|
||
|
SSLProtocol -all +TLSv1.2
|
||
|
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
|
||
|
</VirtualHost>
|
||
| configs/phalanx/apache/nextcloud.conf | ||
|---|---|---|
|
Alias /nextcloud "/var/www/nextcloud/"
|
||
|
|
||
|
<Directory /var/www/nextcloud/>
|
||
|
Options +FollowSymlinks
|
||
|
AllowOverride All
|
||
|
|
||
|
<IfModule mod_dav.c>
|
||
|
Dav off
|
||
|
</IfModule>
|
||
|
|
||
|
SetEnv HOME /var/www/nextcloud
|
||
|
SetEnv HTTP_HOME /var/www/nextcloud
|
||
|
|
||
|
</Directory>
|
||
| configs/phalanx/apache/stuff.conf | ||
|---|---|---|
|
<Location /stuff>
|
||
|
AuthType Digest
|
||
|
AuthName "stuff"
|
||
|
AuthDigestProvider file
|
||
|
AuthUserFile /home/dsorber/web_users
|
||
|
Require valid-user
|
||
|
</Location>
|
||
| configs/phalanx/apache/trac.conf | ||
|---|---|---|
|
WSGIScriptAlias /trac /home/dsorber/trac/projects/headquarters/trac.wsgi
|
||
|
|
||
|
<Directory /home/dsorber/trac/projects/headquarters/>
|
||
|
WSGIApplicationGroup %{GLOBAL}
|
||
|
Require all granted
|
||
|
</Directory>
|
||
|
|
||
|
<Location "/trac/login">
|
||
|
AuthType Digest
|
||
|
AuthName "trac"
|
||
|
AuthDigestProvider file
|
||
|
AuthUserFile /home/dsorber/web_users
|
||
|
Require valid-user
|
||
|
</Location>
|
||
|
|
||
|
Alias /trac/chrome/common /home/dsorber/trac/projects/headquarters/htdocs/common
|
||
|
Alias /trac/chrome/site /home/dsorber/trac/projects/headquarters/htdocs/site
|
||
|
|
||
|
<Directory "/home/dsorber/trac/projects/headquarters/htdocs">
|
||
|
Require all granted
|
||
|
</Directory>
|
||
| configs/phalanx/apache/transmission.conf | ||
|---|---|---|
|
ProxyRequests Off
|
||
|
<Location /transmission>
|
||
|
AuthType Digest
|
||
|
AuthName "engine"
|
||
|
AuthDigestProvider file
|
||
|
AuthUserFile /home/dsorber/web_users
|
||
|
Require valid-user
|
||
|
ProxyPass http://192.168.8.6:9565/transmission
|
||
|
ProxyPassReverse http://192.168.8.6:9565/transmission
|
||
|
</Location>
|
||
| configs/phalanx/network_tweaks_phalanx.sh | ||
|---|---|---|
|
#!/bin/bash
|
||
|
|
||
|
sleep 2
|
||
|
|
||
|
# Delete the default route for enp1s0f0, we only want to use it for 10G
|
||
|
# traffic. NOTE: netplan/networkd correctly is setting the route.
|
||
|
/sbin/route del -net 192.168.0.0 netmask 255.255.0.0 dev enp1s0f0
|
||
|
|
||
|
# Set 9000 MTU for the 10G interface enp1s0f0
|
||
|
/sbin/ifconfig enp1s0f0 mtu 9000
|
||
|
|
||
|
exit 0
|
||
| configs/phalanx/networking-tweaks.service | ||
|---|---|---|
|
[Unit]
|
||
|
Description=Tweak Some Networking Settings
|
||
|
Wants=network-online.target
|
||
|
After=network-online.target
|
||
|
|
||
|
[Service]
|
||
|
ExecStart=/home/dsorber/network_tweaks_phalanx.sh
|
||
|
|
||
|
[Install]
|
||
|
WantedBy=multi-user.target
|
||
|
|
||
|
# Setup
|
||
|
#
|
||
|
# Install network_tweaks_phalanx.sh script.
|
||
|
# Copy networking-tweaks.service to /lib/systemd/system/
|
||
|
# Start it: sudo systemctl start networking-tweaks.service
|
||
|
# Enable it: sudo systemctl enable networking-tweaks.service
|
||
| configs/phalanx/settings.json | ||
|---|---|---|
|
{
|
||
|
"alt-speed-down": 3072,
|
||
|
"alt-speed-enabled": false,
|
||
|
"alt-speed-time-begin": 540,
|
||
|
"alt-speed-time-day": 127,
|
||
|
"alt-speed-time-enabled": false,
|
||
|
"alt-speed-time-end": 1020,
|
||
|
"alt-speed-up": 256,
|
||
|
"bind-address-ipv4": "0.0.0.0",
|
||
|
"bind-address-ipv6": "::",
|
||
|
"blocklist-enabled": true,
|
||
|
"blocklist-url": "http://list.iblocklist.com/?list=bt_level1&fileformat=p2p&archiveformat=gz",
|
||
|
"cache-size-mb": 4,
|
||
|
"dht-enabled": true,
|
||
|
"download-dir": "/var/lib/transmission-daemon/downloads",
|
||
|
"download-limit": 100,
|
||
|
"download-limit-enabled": 0,
|
||
|
"download-queue-enabled": true,
|
||
|
"download-queue-size": 5,
|
||
|
"encryption": 1,
|
||
|
"idle-seeding-limit": 30,
|
||
|
"idle-seeding-limit-enabled": false,
|
||
|
"incomplete-dir": "/home/debian-transmission/Downloads",
|
||
|
"incomplete-dir-enabled": false,
|
||
|
"lpd-enabled": false,
|
||
|
"max-peers-global": 200,
|
||
|
"message-level": 1,
|
||
|
"peer-congestion-algorithm": "",
|
||
|
"peer-id-ttl-hours": 6,
|
||
|
"peer-limit-global": 1200,
|
||
|
"peer-limit-per-torrent": 280,
|
||
|
"peer-port": 61993,
|
||
|
"peer-port-random-high": 65535,
|
||
|
"peer-port-random-low": 49152,
|
||
|
"peer-port-random-on-start": false,
|
||
|
"peer-socket-tos": "default",
|
||
|
"pex-enabled": true,
|
||
|
"port-forwarding-enabled": false,
|
||
|
"preallocation": 1,
|
||
|
"prefetch-enabled": true,
|
||
|
"queue-stalled-enabled": true,
|
||
|
"queue-stalled-minutes": 30,
|
||
|
"ratio-limit": 2,
|
||
|
"ratio-limit-enabled": false,
|
||
|
"rename-partial-files": true,
|
||
|
"rpc-authentication-required": false,
|
||
|
"rpc-bind-address": "0.0.0.0",
|
||
|
"rpc-enabled": true,
|
||
|
"rpc-host-whitelist": "",
|
||
|
"rpc-host-whitelist-enabled": true,
|
||
|
"rpc-password": "{8728a1e529016b129773c32f8a5e959c78199d62nqZcItFf",
|
||
|
"rpc-port": 9565,
|
||
|
"rpc-url": "/transmission/",
|
||
|
"rpc-username": "dsorber",
|
||
|
"rpc-whitelist": "192.168.8.*",
|
||
|
"rpc-whitelist-enabled": true,
|
||
|
"scrape-paused-torrents-enabled": true,
|
||
|
"script-torrent-done-enabled": false,
|
||
|
"script-torrent-done-filename": "",
|
||
|
"seed-queue-enabled": false,
|
||
|
"seed-queue-size": 10,
|
||
|
"speed-limit-down": 100,
|
||
|
"speed-limit-down-enabled": false,
|
||
|
"speed-limit-up": 1024,
|
||
|
"speed-limit-up-enabled": true,
|
||
|
"start-added-torrents": true,
|
||
|
"trash-original-torrent-files": false,
|
||
|
"umask": 18,
|
||
|
"upload-limit": 100,
|
||
|
"upload-limit-enabled": 0,
|
||
|
"upload-slots-per-torrent": 14,
|
||
|
"utp-enabled": true
|
||
|
}
|
||
Adding networking configuration for brutus and phalanx.